Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

Intune’s Explorer lets administrators ask natural-language questions about supported areas of their managed environment, review Copilot’s summary, and follow up on results. Depending on the result, that can mean investigating a resource, exporting data, or adding listed users or devices to a group for app or policy targeting. Explorer works with available query views—not unrestricted questions against every Intune field.

What Explorer does—and what it does not do

Explorer is the data-exploration part of Copilot in Intune. It matches a natural-language request to an available query view, runs the query with any required parameters, and helps interpret the result. Copilot can explain the query, summarize results, suggest further queries, and recommend possible actions. These are aids to investigation; review the results and decide whether a suggested action is appropriate for your environment.

Coverage and query capabilities evolve. Use the prompt suggestions shown in the admin center, and phrase requests around a specific area or outcome rather than assuming any question can be answered. Microsoft’s examples include “what are the top 5 apps” and “Get Platform devices that are noncompliant.” Microsoft’s Explorer documentation describes the supported workflow and areas.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Explorer coverage

Microsoft documents Explorer query areas for:

  • Advanced Analytics
  • App configuration and app protection
  • Apps
  • Audit logs
  • Compliance
  • Device configuration
  • Device updates
  • Device properties
  • Endpoint Privilege Management
  • Role-based access control
  • Users and groups
  • Windows Autopilot deployments

How to run a query and follow through

  1. In the Microsoft Intune admin center, open Explorer and start entering a natural-language request. Consider the prompt suggestions that appear as you type; they reflect available query views.
  2. Choose a concrete question and supply any required parameters, such as a platform or device detail. Examples from Microsoft documentation include “what are the top 5 apps” and a request to get platform devices that are noncompliant. A related device-query example is “Which devices aren’t encrypted?”; device query is a distinct feature, discussed below.
  3. Run the query. Review the result alongside Copilot’s explanation and summary. If the result needs more context, try a suggested follow-up query or investigate an individual resource.
  4. When useful, export the results. For a result listing users or devices, Explorer can also add those items to an existing group or a new group. You can then target apps or policies to that group, subject to your permissions and the relevant assignment settings.
  5. If you add items to a group, check the progress report created for that operation. Microsoft says this report is not available again later, so export it if you need to retain a record.

Access, permissions, and licensing

Explorer requires Security Copilot to be enabled and configured, including its first-run setup, and the Intune plugin to be enabled. The administrator also needs an appropriate Security Copilot or Microsoft Entra role. Intune role-based access controls and scope tags continue to apply: Copilot only exposes data and allows actions within the administrator’s assigned permissions. A successful query therefore does not imply visibility into every tenant resource or permission to act on every result.

#1 Best Overall
Microsoft Surface Pro 2-in-1 Laptop/Tablet (2025), Windows 11 Copilot+ PC, 12" Touchscreen Display, Snapdragon X Plus (8 Core), 16GB RAM, 256GB Storage, Platinum
  • [This is a Copilot+ PC] — The fastest, most intelligent Windows PC ever, with built-in AI tools that help you write, summarize, and multitask — all while keeping your data and privacy secure.
  • [The Power of a Laptop, the Flexibility of a Tablet] — Surface Pro 12” is a 2-in-1 device that adapts to you. Use it as a tablet for on-the-go tasks, prop it up with the built-in kickstand, or attach the Surface Pro Keyboard (sold separately) to turn it into a full laptop.
  • [Incredibly Fast and Intelligent] — Powered by the latest Snapdragon X Plus processor and an AI engine that delivers up to 45 trillion operations per second — for smooth, responsive, and smarter performance.
  • [All Day Battery Life] — Up to 16 hours of battery life[1] means you can work, stream, and create wherever the day takes you — without reaching for a charger.
  • [Brilliant 12” Touchscreen Display] — The PixelSense display delivers vibrant color and crisp detail in a sleek design — perfect for work, entertainment, or both.

Microsoft states that Copilot in Intune is included with Security Copilot and does not require a separate Intune-specific Copilot license. Do not apply that statement to every related feature: Microsoft separately says that using device query requires a license that includes Advanced Analytics. The device-query examples “Which devices aren’t encrypted?” and “Show me Windows 11 devices” should not be mistaken for proof that those queries belong to Explorer’s workflow or have the same licensing requirements. See the Microsoft overview of Security Copilot in Intune for the broader feature and licensing distinctions.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

How Explorer fits into the wider Copilot in Intune suite

Copilot in Intune includes capabilities beyond Explorer. Microsoft’s overview also describes policy and setting management, device details and troubleshooting, Endpoint Privilege Management request analysis, Microsoft Surface troubleshooting, and Windows 365 Cloud PC insights. It also describes specialized Intune agents for change review, device offboarding, policy configuration, and vulnerability remediation.

Rank #2
Microsoft Surface Pro 7+ Tablet, 12.3in(2736 x 1824) Touchscreen, Core i5-1135G7 2.4GHz, 8GB RAM, 256GB SSD, CAM, Windows 11 Pro(Renewed)
  • Laptop Size: This renewed Microsoft Surface Pro 7+ Tablet, has a screen size of 12.3 " and touch display. The 2736 X 1824 Pixel anti-glare screen, mostly reduces fatigue when using it, allowing you to focus on work. With a light weight, this Microsoft Surface refurbished laptop is a great choice for your Business and entertainment.
  • Processor: This Renewed Surface Pro 7 Plus Tablet is installed with Intel Core i5-1135 G7 (2.4GHz-4.2GHz, 4Cores, 8Threads, 8 MB Intel Smart Cache), meeting the fast and stable operation of most programs.
  • Powerful Memory: This refurbished Tablet has installed 8GB of RAM running memory and 256GB of Solid State Drive for you, allowing you to run multiple software and browsers at the same time with confidence, the Microsoft Surface powerful hard drive gives you enough space to download files!
  • Multiple Ports:USB 3.0, microSD card reader(Optional), Headphone jact, Mini DisplayPort, Cover port, Charging port, this Microsoft SurfaceTablet allows you to fully enjoy the pleasure brought by technology.
  • System: Windows 11 Pro is recognized as the most stable operating system, which is mostly for both commercial and professional users. Windows 11 Pro provides more security and management features for this used Surface Pro 7 (+) Tablet, as well as supporting virtualization and remote access. Meanwhile, it supports multiple languages, including English, French, Spanish, German, etc.

Those capabilities address different tasks; they should not all be treated as Explorer actions. Use Explorer when the job is to query supported Intune data and work from the results. For policy work, troubleshooting, or an agent-led workflow, select the corresponding capability and check its specific configuration, permissions, and licensing requirements.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Best Value
Microsoft Surface Pro 7 Plus Tablet 2-in-1 Intel Core i3 8GB RAM 128GB SSD 12.3 Inch Touchscreen Platinum Silver Windows 11 PRO (Renewed)
  • Microsoft Surface Pro 7+ 12.3" Tablet 2-in-1 Laptop, Amazon Renewed, Core i3 with 128GB SSD and 8GB RAM
  • More ways to connect, with both USB-C and USB-A ports for connecting to displays, docking stations and more, as well as accessory charging, Platinum Silver Color
  • Standout design that won’t weigh you down — ultra-slim and light Surface Pro 7+ starts at just 1.70 pounds. Aspect ratio: 3:2
  • Intel Core i3-1114G5 (1.70-3.0Ghz) | 128GB SSD | 8GB RAM | Windows 11 Professional Installed
  • Screen: 12.3” PixelSense Display | Resolution: 2736 x 1824 (267 PPI) | Faster than Surface Pro 6, with a 10th Gen Intel Core Processor – redefining what’s possible in a thin and light computer. Wireless : Wi-Fi 6: 802.11ax compatible. Bluetooth Wireless 5.0 technology
Rank #4
Sale
Microsoft Surface Pro 7 12.3in Intel Core i5 10th Gen 8GB RAM 128GB SSD Platinum (Renewed)
  • Intel Core i5-1035G4 3.70GHz processor, 128GB SSD Drive
  • 8GB RAM, Wireless: 802.11a/b/g/n/ac Wi-Fi, Bluetooth 4.0
  • Ports: Full-size USB 3.0; microSD card reader; Headphone jack; Mini DisplayPort; Cover port; Charging port, Camera: 5MP front-facing and 8MP rear-facing cameras with 1080p HD video recording
  • Display: 12.3-inch PixelSense touchscreen display; 2736 x 1824 resolution, Stereo speakers with Dolby Audio-enhanced sound
  • Operating System: Windows 10 Home, Intel Iris Plus Graphics
Rank #3
Sale
Microsoft Surface Pro (2026), 13-inch Premium Performance 2-in-1 Laptop, Snapdragon X2 Plus Processor, Touchscreen Display, 16GB RAM, 512GB SSD Storage, Windows 11 Copilot+ PC Built for AI, Black
  • A PREMIUM PERFORMANCE 2-IN-1 LAPTOP & TABLET — Ready for work, school, and creativity. Built for busy days, big projects, and nonstop multitasking. Run video calls, school and work apps, 20+ browser tabs, and AI tools at the same time without slowing down.
  • WITH AI BUILT IN — With a dedicated AI chip (Qualcomm Snapdragon X2 Plus), this Copilot+ PC[5] on Windows 11 helps you work smarter and faster. Prompt, create, and automate with ease — ready for even your most demanding tasks.
  • A STUNNING 13" OLED TOUCHSCREEN — Sharp colors, real detail, and smooth 120Hz scrolling on the PixelSense touchscreen[1] with LCD display[2]. Tap, scroll, draw, or pinch to zoom — whichever feels right for streaming, sketching, or daily work.
  • 15.5 HOURS OF BATTERY (LEAVE THE CHARGER) — Up to 15.5 hours of video playback[3] on a single charge. Work from a coffee shop, take it to class/work, or binge a season on a long flight — it'll keep up.
  • THE PORTS YOU NEED — Two USB-C / USB4[4] ports for fast charging, big file transfers, or hooking up to three 4K monitors when you want a full desktop. Wi-Fi 7 keeps you online and fast wherever you are.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.